Lucene search
K

4778 matches found

OSV
OSV
added 2021/12/23 1:15 a.m.7 views

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.8AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2021/12/23 1:15 a.m.27 views

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.01372EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/12/23 12:45 a.m.24 views

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.7AI score0.01372EPSS
Exploits0References5
CVE
CVE
added 2021/12/23 12:45 a.m.130 views

CVE-2021-4066

CVE-2021-4066 is an integer underflow in the ANGLE component of the Chromium browser engine, present before version 96.0.4664.93. The vulnerability could allow a remote attacker to cause heap corruption through crafted HTML/web content, potentially enabling arbitrary code execution. Concrete refe...

8.8CVSS8.3AI score0.01372EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2021/12/23 12:45 a.m.30 views

CVE-2021-4066

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score0.01372EPSS
Exploits0
OSV
OSV
added 2021/12/22 6:15 p.m.2 views

ALPINE-CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

9.8CVSS7.8AI score0.0462EPSS
Exploits0References1
NVD
NVD
added 2021/12/22 6:15 p.m.13 views

CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

9.8CVSS0.0462EPSS
Exploits0References10
OSV
OSV
added 2021/12/22 6:15 p.m.23 views

CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

9.8CVSS3.1AI score
Exploits0References10
UbuntuCve
UbuntuCve
added 2021/12/22 6:15 p.m.30 views

CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

9.8CVSS7.5AI score0.0462EPSS
Exploits0References6
Prion
Prion
added 2021/12/22 6:15 p.m.25 views

Integer overflow

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

9.3CVSS9.4AI score0.0462EPSS
Exploits0References9Affected Software4
OSV
OSV
added 2021/12/22 6:15 p.m.2 views

UBUNTU-CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

9.8CVSS7.6AI score0.0462EPSS
Exploits0References7
Cvelist
Cvelist
added 2021/12/22 12:0 a.m.23 views

CVE-2021-37706 Potential integer underflow upon receiving STUN message in PJSIP

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

7.3CVSS9.8AI score0.0462EPSS
Exploits0References9
CNNVD
CNNVD
added 2021/12/22 12:0 a.m.3 views

PJSIP 数字错误漏洞

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a numeric error vulnerability that stems from the fact that an incoming STUN message containing the ERROR-CODE...

9.8CVSS8.8AI score0.0462EPSS
Exploits0References20
AlpineLinux
AlpineLinux
added 2021/12/22 12:0 a.m.29 views

CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

9.8CVSS8.7AI score0.0462EPSS
Exploits0
NVD
NVD
added 2021/12/19 9:15 a.m.13 views

CVE-2021-43083

Apache PLC4X - PLC4C Only the C language implementation was effected was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a...

8.8CVSS0.01921EPSS
Exploits0References2
Prion
Prion
added 2021/12/19 9:15 a.m.15 views

Integer overflow

Apache PLC4X - PLC4C Only the C language implementation was effected was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a...

6.5CVSS8.4AI score0.01921EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/12/19 8:25 a.m.16 views

CVE-2021-43083 Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response

Apache PLC4X - PLC4C Only the C language implementation was effected was vulnerable to an unsigned integer underflow flaw inside the tcp transport. Users should update to 0.9.1, which addresses this issue. However, in order to exploit this vulnerability, a user would have to actively connect to a...

8.7AI score0.01921EPSS
Exploits0References2
OSV
OSV
added 2021/12/17 5:15 p.m.3 views

CVE-2021-20607

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

5.5CVSS6.1AI score0.00932EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/12/17 4:10 p.m.24 views

CVE-2021-20607

Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2.84N and prior and Mitsubishi Electric EZSocket versions 5.4 and prior allows an attacker to cause a DoS condition in the software by getting a user to open...

5.6AI score0.00932EPSS
Exploits0References3
ICS
ICS
added 2021/12/16 12:0 a.m.169 views

Mitsubishi Electric FA Engineering Software (Update B)

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Equipment: FA Engineering Software Vulnerabilities: Out-of-bounds Read, Integer Underflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-350-05...

5.5CVSS6AI score0.00932EPSS
Exploits0References4
Rows per page
Query Builder